CVE-2023-23451 - CVE House
Back to Database
Status published Unknown CVE-2023-23451

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI...

Vulnerability Description

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN4 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK FX0-GENT00000 FLEXISOFT EIP GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GMOD00000 FLEXISOFT MOD GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GPNT00000 FLEXISOFT PNET GATEW. with serial number <=2311xxxx with Firmware <=V2.12.0, SICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 with serial number <=2311xxxx all Firmware versions, SICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 with serial number <=2311xxxx all Firmware versions and SICK FX0-GMOD00010 FLEXISOFT MOD GW with serial number <=2311xxxx with Firmware <=V2.11.0 all have Telnet enabled by factory default. No password is set in the default configuration.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-23451

Credits & Attribution

No credits recorded in the NVD database.

References

More from N/A

View All →
CVE-2025-8083
Vuetify Prototype Pollution via Preset options
High 8.6
CVE-2025-8082
Vuetify XSS via unsanitized 'titleDateFormat' in 'VDatePicker'
Medium 6.3
CVE-2025-22217
Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability...
High 8.6
CVE-2025-1461
Vuetify XSS through 'eventMoreText' prop of VCalendar
Medium 5.6
CVE-2025-14505
Elliptic Cryptanalysis vulnerability when `k` has leading zeros
Medium 5.6

Affected Vendor

Affected Software

SICK FX0-GENT00000, SICK FX0-GENT00030, SICK FX0-GMOD00000, SICK FX0-GMOD00010, SICK FX0-GPNT00000, SICK FX0-GPNT00030, SICK UE410-EN1, SICK UE410-EN3, SICK UE410-EN3S04, SICK UE410-EN4
Vulnerable Versions:
<=2311xxxx, <=V2.11.0

Timeline

Official Publish: April 19th, 2023
Last Modified: February 5th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-477

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.